TrojanDownloader:Win32/Agent.EL

The TrojanDownloader:Win32/Agent.EL will install rogue security software PHP/MySQL and JavaScript Scripts into the affected machines without users knowledge. The TrojanDownloader:Win32/Agent.EL file size is 53760 bytes.

Payload

Once launched, the TrojanDownloader:Win32/Agent.EL performs the following actions:

Download rogue security tool PHP/MySQL and JavaScript Scripts from the following domains:http://mywebmasterinabox.com/

Modify the properties of the following files:%SYSTEMROOT%:\WINDOWS\System32\\d3dxof.dll